v0.4.0-rc.14

Container image: ghcr.io/just-tavrn/tavrn-node:0.4.0-rc.14 (sha256:929f71e7c706890da7f5ffde767f2d88bfa813e07b30e5e34fd4e111788b2ad6, manifest list for linux/amd64 and linux/arm64)

Web client: tavrn-web v0.4.0-rc.14 (19229c5bd3d3e56652b9e0b71fd03fc5c5890cdb). Upgrade notes: README.md ("Upgrading").

Verify the image: gh attestation verify oci://ghcr.io/just-tavrn/tavrn-node@sha256:929f71e7c706890da7f5ffde767f2d88bfa813e07b30e5e34fd4e111788b2ad6 --repo just-tavrn/tavrn-node

What's Changed

• Enforce whisper initiation permissions and authenticated replies by @babatonga in #112
• Whisper: hide a revoked whisper at once, remove the publisher only after a grace period by @babatonga in #114
• Version 0.4.0-rc.14 by @babatonga in #116

Full Changelog: v0.4.0-rc.13...v0.4.0-rc.14

v0.4.0-rc.13

Container image: ghcr.io/just-tavrn/tavrn-node:0.4.0-rc.13 (sha256:356a18c69a7fba2086476793cdee5498cd1c27323bf7336e3208acfb68b8c879, manifest list for linux/amd64 and linux/arm64)

Web client: tavrn-web v0.4.0-rc.13 (fc3aa4c71a3beb3647d6f7e21e6890113c040ac4). Upgrade notes: README.md ("Upgrading").

Verify the image: gh attestation verify oci://ghcr.io/just-tavrn/tavrn-node@sha256:356a18c69a7fba2086476793cdee5498cd1c27323bf7336e3208acfb68b8c879 --repo just-tavrn/tavrn-node

What's Changed

• governance: clarify contributions and independent hosting by @babatonga in #105
• Validate private select fields in bot modals by @babatonga in #107
• Support encrypted whispers in voice channels by @babatonga in #109
• Version 0.4.0-rc.13 by @babatonga in #110

Full Changelog: v0.4.0-rc.12...v0.4.0-rc.13

v0.4.0-rc.12

Container image: ghcr.io/just-tavrn/tavrn-node:0.4.0-rc.12 (sha256:83adeda38e03b129e334f8ff8a656dc6b70b733b64da86f4b6212efe7655b8ac, manifest list for linux/amd64 and linux/arm64)

Web client: tavrn-web v0.4.0-rc.12 (664ee77276c321871af1ecdf83b9e91937331657). Upgrade notes: README.md ("Upgrading").

Verify the image: gh attestation verify oci://ghcr.io/just-tavrn/tavrn-node@sha256:83adeda38e03b129e334f8ff8a656dc6b70b733b64da86f4b6212efe7655b8ac --repo just-tavrn/tavrn-node

What's Changed

• Bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #80
• LiveKit 1.13.9 everywhere at once; Dependabot leaves the coupled pins alone by @babatonga in #98
• Performance nightly: calibration re-anchored to the current MLS client, slow-disk runs inconclusive by @babatonga in #101
• Chat UX wave: room preview with privacy and legal notices, security notices in private channels by @babatonga in #102
• Version 0.4.0-rc.12 by @babatonga in #103

Full Changelog: v0.4.0-rc.10...v0.4.0-rc.12

v0.4.0-rc.10

Container image: ghcr.io/just-tavrn/tavrn-node:0.4.0-rc.10 (sha256:9febff3631c09590b4e7fab549fb38c45d41c084b36b6da56c034d2ec68404b4, manifest list for linux/amd64 and linux/arm64)

Web client: tavrn-web v0.4.0-rc.10 (150acd801de69859ed7a3ce1ee0b5a3f39df63e7). Upgrade notes: README.md ("Upgrading").

Verify the image: gh attestation verify oci://ghcr.io/just-tavrn/tavrn-node@sha256:9febff3631c09590b4e7fab549fb38c45d41c084b36b6da56c034d2ec68404b4 --repo just-tavrn/tavrn-node

What's Changed

• tavrn-crypto from crates.io: the published 0.1.0 instead of a git revision by @babatonga in #95
• Version 0.4.0-rc.10 by @babatonga in #96

Full Changelog: v0.4.0-rc.9...v0.4.0-rc.10

v0.4.0-rc.9

Container image: ghcr.io/just-tavrn/tavrn-node:0.4.0-rc.9 (sha256:c30a4a3e6262f8e9d7c526d132f5927473721f3d99ffc23fd4f4f94b3fd2a9d9, manifest list for linux/amd64 and linux/arm64)

Web client: tavrn-web v0.4.0-rc.9 (6a480d606d2fe16f52ad5aeae3b0a70b5c0d103e). Upgrade notes: README.md ("Upgrading").

Verify the image: gh attestation verify oci://ghcr.io/just-tavrn/tavrn-node@sha256:c30a4a3e6262f8e9d7c526d132f5927473721f3d99ffc23fd4f4f94b3fd2a9d9 --repo just-tavrn/tavrn-node

What's Changed

• Publication hygiene: Dependabot pull requests without the private patterns by @babatonga in #84
• Entitlement files_channels.internal: the node's own storage per room owner by @babatonga in #85
• Visibility: announce a new category and its channel once and in order by @babatonga in #87
• Message components: validation, component interactions, update and modal responses, modal submits by @babatonga in #88
• Reactions: message.update names the change and the reactor, reactors route, no viewer flags in events by @babatonga in #89
• Review round: security/ops hardening, route and service hot paths, perf nightly, bots' files and report inbox, flaky fixes, CI by @babatonga in #92
• Hardening round: security audit 2 fixes for auth, limits, automod, bots, push, federation, files; commit effects survive a dropped request by @babatonga in #93
• Version 0.4.0-rc.9 by @babatonga in #94

Full Changelog: v0.4.0-rc.8...v0.4.0-rc.9

v0.4.0-rc.8

Container image: ghcr.io/just-tavrn/tavrn-node:0.4.0-rc.8 (sha256:4ab7c3ced0eda203f491d2a4ca9588d657136175b959e3925593e53e7d46f667, manifest list for linux/amd64 and linux/arm64)

Web client: tavrn-web v0.4.0-rc.8 (7005251227f5ed1e749909f2a30069192e46bb85). Upgrade notes: README.md ("Upgrading").

Verify the image: gh attestation verify oci://ghcr.io/just-tavrn/tavrn-node@sha256:4ab7c3ced0eda203f491d2a4ca9588d657136175b959e3925593e53e7d46f667 --repo just-tavrn/tavrn-node

What's Changed

• Docs for 0.4.0-rc.7 by @babatonga in #75
• deps: rustls 0.23.46 (RUSTSEC-2026-0346..0349) by @babatonga in #78
• Performance round: warm DB pool, single UPDATE for roles, slow-request log, async voice leave, indexes by @babatonga in #77
• Version 0.4.0-rc.8 by @babatonga in #79

Full Changelog: v0.4.0-rc.7...v0.4.0-rc.8